BID:27318

ngIRCd PART Command Parsing Denial Of Service Vulnerability

Info

ngIRCd PART Command Parsing Denial Of Service Vulnerability

Bugtraq ID:	27318
Class:	Unknown
CVE:	CVE-2008-0285
Remote:	Yes
Local:	No
Published:	Jan 16 2008 12:00AM
Updated:	Mar 13 2008 02:41AM
Credit:	The vendor reported this issue.
Vulnerable:	ngIRCd ngIRCd 0.10.3 ngIRCd ngIRCd 0.10.2 ngIRCd ngIRCd 0.8.2 ngIRCd ngIRCd 0.8.1 ngIRCd ngIRCd 0.8 ngIRCd ngIRCd 0.7.7 ngIRCd ngIRCd 0.7.6 ngIRCd ngIRCd 0.7.5 ngIRCd ngIRCd 0.7.1 ngIRCd ngIRCd 0.7 ngIRCd ngIRCd 0.6.1 ngIRCd ngIRCd 0.6 ngIRCd ngIRCd 0.11-pre2 Gentoo Linux

Not Vulnerable:	ngIRCd ngIRCd 0.11 ngIRCd ngIRCd 0.10.4

Discussion

ngIRCd PART Command Parsing Denial Of Service Vulnerability

ngIRCd is prone to a denial-of-service vulnerability.

Attackers can exploit this issue to deny service to legitimate users.

Versions prior to ngIRCd 0.10.4 and 0.11.0-pre2 are vulnerable.

Exploit / POC

ngIRCd PART Command Parsing Denial Of Service Vulnerability

Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Solution / Fix

ngIRCd PART Command Parsing Denial Of Service Vulnerability

Solution:
The vendor has released updates to address this issue. Please see the references for more information.

ngIRCd ngIRCd 0.11-pre2